<meta charset="utf8">
<img src='javascript:"'>
<a href='local#"'>local</a>
<a href="http://www.example.com/#&quot;&gt;&lt;script&gt;alert(0)&lt;/script&gt;">external</a>
